ICT Managed Security Services

The Council requires to have in place a robust ICT security perimeter monitoring service to ensure cyber resilience, threat detection, analysis, and response. This monitoring service plays a critical role in the Council’s cyber security strategy and in achieving information governance objectives. The managed service is necessary to assist in meeting security criteria specified by external information security compliance schemes which the Council adheres to including Public Service Network (PSN) Information Assurance Conditions, Payment Card Industry Data Security Standards (PCI DSS), Cyber Essentials Scheme, Data Protection Act (DPA), and the General Data Protection Regulations (GDPR). The services required include, but not limited to: Threat management 24/7 monitoring of firewall logs and 365 environment Security operations centre (SOC) Incident management system Threat intelligence, security advisories, and notifications Log retention Systems health, availability, and performance monitoring Device management and software updates Training and documentation Quality plan, project management, and implementation (where required) Award against framework: GCA G-Cloud 14 Framework, Lot 2 Cloud Software Please note, the alternative review body to the local Sheriff Court detailed in VI.4.1 is: Court of Session Parliament House Parliament Square Edinburgh EH1 1RQ +44 1312252595 supreme.courts@scotcourts.gov.uk Community benefits are included in this requirement. For more information see: https://www.gov.scot/policies/public-sector-procurement/community-benefits-in-procurement/ A summary of the expected community benefits has been provided as follows: Supplier completed the Council's Menu of Community Benefits to identify which Community Benefits they could offer during the course of the contract period. They offered the following: Use of local SMEs Local Events Community Endowment Fund/Development Trust (SC Ref:836885)